Extend WiredTiger's functional model to support rollback to stable in both the recover and the runtime mode.

To do this:

• Add the RTS operation to the model.
• Implement a verifier that checks that the database and the model after RTS are equivalent.